41CRules to protect privacy of Australians—DIO

#### 41C Rules to protect privacy of Australians—DIO (1) The responsible Minister in relation to DIO must make written rules regulating the communication and retention by DIO of intelligence information concerning Australian persons. (2) DIO must not communicate intelligence information concerning Australian persons, except in accordance with the rules. (3) In making the rules, the Minister must have regard to the need to ensure that the privacy of Australian persons is preserved as far as is consistent with the proper performance by DIO of its functions. (4) Before making the rules, the Minister must consult with: (a) the Attorney‑General; and (b) the Inspector‑General of Intelligence and Security; and (c) the Director of DIO. (5) For the purpose of consultations under paragraphs (4)(a) and (b), the Minister must provide a copy of the rules the Minister is proposing to make to the Attorney‑General and to the Inspector‑General of Intelligence and Security. (6) The Minister must ensure that the rules are published on DIO’s website as soon as practicable after the rules are made, except to the extent that the rules contain: (a) operationally sensitive information (within the meaning of Schedule 1); or (b) information that would or might prejudice: (i) Australia’s national security or the conduct of Australia’s foreign relations; or (ii) the performance by DIO of its functions. (7) Rules made under subsection (1) are not legislative instruments. (8) The Inspector‑General of Intelligence and Security must brief the Committee on the content and effect of the rules if: (a) the Committee requests the Inspector‑General of Intelligence and Security to do so; or (b) the rules change.